Penetration Tester / Application Security / DevSecOps

  • Full-time
  • Department: Professional Services

Company Description

There is greatness in you. At Anitian, your greatness will flourish. Anitian we believe information security is essential to growth, innovation, and prosperity. To achieve this vision, we are on a mission to build great security leaders.

Anitian is the oldest and most trusted name in information security. We work with some of the largest and most respected brands in the world.  Companies hire Anitian because they want to do security the right way.  Also, as a truly independent security firm, we are free to fully embody our core values of reason, pragmatism, excellence, integrity, effectiveness, and responsibility. 

When you join Anitian, you will experience the immediate respect of peers, due to our reputation as a company of ingenuity and thought-leadership. 

Let's work together to make the world a better, safer place.  

Job Description

We are seeking candidates to perform penetration tests, vulnerability scans, code review, and web application testing. 

A successful candidate will have experience with software development, DevOps, and information security.  We prefer candidates with a very strong development background who are looking to expand their careers into information security.  You should have a passion for security testing, with a deep understanding of the tactics hackers use to compromise hosts and applications. 

Anitian is committed to scientific methods of analysis. Our testing follows proven testing regimens to arrive at verifiable conclusions. 

This is a full-time, salaried position with benefits working at Anitian's offices in Portland, OR. 

Qualifications

Required
  • Hands-on experience in IT working with systems and networks 
  • Strong understanding of common operating systems Windows, Linux, etc. 
  • Deep experience with network protocols at both network and application layer
  • Experience with Nessus, Kali Linux, Checkmarx, Metasploit, and other security testing tools is highly desirable 
  • Strong software development experience in any language.  
  • Experience with DevOps concepts, specifically the trend of DevSecOps
  • Understanding of information security concepts and frameworks such as ISO 27001, OWASP, SANS / CIS Critical Controls
  • Deep understanding of security controls, such as NGFW, IDS/IPS, endpoint security, and more 
  • Excellent communication skills 
Desired 
  • Security certifications such as CISSP, CEH, or similar 
  • Understanding of common security standards like PCI DSS, HIPAA, NERC-CIP, GLBA, and more.
  • Experience in digital forensics 
  • Reverse engineering of malware 
  • A college degree

Additional Information

  • This position is based onsite at our client's offices in downtown Portland, OR.
  • Relocation reimbursement is not available 
  • Competitive compensation package
  • Four weeks of paid time off per year 
  • Generous benefit package includes 100% employer paid health care coverage, as well as vision and dental benefits
  • 401K retirement plan and profit sharing. 
  • Some travel is required, but rarely exceeds 15% or so
  • Candidates must pass a criminal background check, reference check and drug test before being hired
  • Recruiters, do not contact us about this job

Privacy Policy